Same here.
* edit a user (or your profile)
* enter a new password and submit
* go to the edit page again
* the password is filled in. Even with autocomplete off.